netpot.exe stopped working

[wesley]

I don't know what the application netpot.exe does but every time I boot up my computer, I get a message saying it has stopped working and must close. So far, this has only been a nuisance and the application failure doesn't seem to have any effect on my systems performance. If anyone knows what this applications does, where it came from, or why it would stop working, please don't be shy. Any suggestions will be appreciated.

thx

 

[sidney1st]

Netpot.exe is reported to be a trojan or part of it.
Please attach a hijackthis report to be sure. ( HijackThis Logfileauswertung )

 

[wesley]

I've tried using HijackThis before and have had little success understanding the program. If it means anything, I recently found the netpot.exe is in the file called "Windows" directly on my C Drive. Should I delete the application? If you insist, and explain what exactly it is you want me to do with HijackThis, I will create a report for you.

Thanks.

 

[Zdon]

The main thing is to scan and remove. Try avast (free) and Ad-Aware 2008 (free). Both are good to go on both 32 and 64,

 

[wesley]

There you go. I hope that helps- I'm not sure how to attach a file but that will get you there..
Thanks Znod, I'll get avast. I got Ad-Aware earlier when I found out it would work for me.

Thanks again guys!

file:///C:/Users/Wesley/Desktop/hijackthis.log

 

[Bare Foot Kid]

file:///C:/Users/Wesley/Desktop/hijackthis.log
There you go. I hope that helps.
Thanks Znod, I'll get avast. I got Ad-Aware earlier when I found out it would work for me.

Thanks again guys!

Hello again wesley, you may want to check the link... I can't get it to open!


Later Ted

 

[wesley]

You're right, it doesn't seem to work. Will someone please tell me how to attach a file because all I did was drag and drop the text file into the box to make the link and since that doesn't work, I guess I'll need to know how to attach the text file.

 

[Bare Foot Kid]

Hello wesley,

See the "Paper Clip" click on it in the "Post Reply" window.

View attachment 4236


Later Ted

 

[wesley]

There the log file is attached.
Thanks Bare Foot Kid!

 

[Bare Foot Kid]

You're welcome wesley!

Now when Sid comes back (or someone else) you'll have the answer!
Sorry I have no experience with HJT.
You can use that same link to post anything here at the forums.


Later Ted

EDIT: You may want to check out this link!

http://www.vistax64.com/software/115872-free-software-list-vista.html

 

[sidney1st]

Very strange log indeed as i never seen the 2 following files.
Please give us the details properties infos on the following files:
netpot.exe (could be in different places, perform a search)
nvlsp.dll (in system32)
Give information on the size too.

Edit:
BTW, it looks like you don't have any AV software running ?

 

[Axon]

nvlsp.dll seems to be a virus mate, do a spyware scan.

 

[dmex]

Hi Wesley,

This program offered at the site below can help detect and remove any spyware present on your system aswell.

(Spybot Search & Destroy)
http://www.safer-networking.org/

Steven

 

[wesley]

Hmmm. Now I've run Norton (no longer installed), Trend Micro Internet security Pro (currently installed), Spybot, Ad-Aware, avast!, AVG Anti-Spyware, and windows Defender. I am still getting the message that says "netpot.exe has stopped working. A problem has caused the application to stop working. Windows wil notify you if there is a solution to the problem" every time I log on to Windows. If someone can confirm that this is truly a malicious program, please do so I know to delete it. But as I said it's in my WINDOWS file as in C://Windows/netpot.exe and I don't know what will happen if I delete it.

 

[dmex]

Hmmm. Now I've run Norton (no longer installed), Trend Micro Internet security Pro (currently installed), Spybot, Ad-Aware, avast!, AVG Anti-Spyware, and windows Defender. I am still getting the message that says "netpot.exe has stopped working. A problem has caused the application to stop working. Windows wil notify you if there is a solution to the problem" every time I log on to Windows. If someone can confirm that this is truly a malicious program, please do so I know to delete it. But as I said it's in my WINDOWS file as in C://Windows/netpot.exe and I don't know what will happen if I delete it.

You can delete that file but it wont delete the spyware on your system.

 

[sidney1st]

Please give us the details properties infos on the following files:
netpot.exe (could be in different places, perform a search)
nvlsp.dll (in system32)
Give information on the size too.

Then?
Anyway netpot.exe looks to be a malware, so the only problem you can have by deleting it would be that it recreates itself.
Give us the infos asked to manage exactly what to do.

 

[wesley]

nvlsp.dll I believe is part of my ntune software driver for my mobo. It is likely a file extension for the ntune system monitor, and I'm fairly certain I need it to manage my system settings.

If someone else has the nvidia nforce 680i LT sli mobo with latest 64-bit software and drivers installed and can confirm this, please do, but since it runs with my nvidia software, thats probably what it is.

 

[dmex]

nvlsp.dll I believe is part of my ntune software driver for my mobo. It is likely a file extension for the ntune system monitor, and I'm fairly certain I need it to manage my system settings.

If someone else has the nvidia nforce 680i LT sli mobo with latest 64-bit software and drivers installed and can confirm this, please do, but since it runs with my nvidia software, thats probably what it is.

I doubt that very much, NTune would never insert itself into the TCP/IP stack (Winsock LSP)

LSPs work by intercepting Winsock 2 commands before they are processed by the TCP internet stack, they can modify the commands, make new commands, or just log the data which makes them a powerful tool for Network filters, Network interceptors, and password sniffers.

You still need to remove the spyware regardless of ntune.

Steven

 

[wesley]

Oh, right. That makes a bit more sense. I'm still not convinced that program is spyware though. My guess is that it is part of ntune's FirstPacket technology. I definitely could be wrong but for some reason I remember something about that application being installed by ntune. Anyway I deleted the netpot application and no more error messages and no file reproduction yet but as far as the spyware, if someone's got a good program I haven't tried [other than Norton (no longer installed), Trend Micro Internet Security Pro (currently installed), Spybot, Ad-Aware, Avast!, AVG Anti-Spyware, and Windows Defender] let me know so I can clean it up.